Technology

NIST updates the confidentiality framework with version 1.1

Why it matters

Recognizing that user data protection has been increasingly contested by the omnipresent cyber attacks, the United States Ministry of Commerce said that it intended to align its two fundamental confidential and cybersecurity executives.

THE NIST confidentiality framework 1.1 Initial public jamming The targets modify the content and the structure which meet the needs of the stakeholders, according to the agency.

Nist says he had to ensure that a granular set of activities and results are intended to help organizations discuss risks in the PFW are binding transparently with those of the updated cybersecurity framework.

CSF 2.0 – which was a 10 -year overhaul – aimed to align with the national cybersecurity strategy of the Biden administration and to offer a series of resources that can be personalized and used individually or in combination as a change in cybersecurity of an organization and its capacities are evolving.

With its PFW 1.1 project, NIST seeks to clarify the concepts of risk management management and to present useful strategies to improve the use of protected personal data, adds a new section on artificial intelligence and risk management and offers a new online guide.

The biggest trend

NIST has published for the first time the sector's privacy setting in 2020 to help developers create secure products and services that use personal data.

Recognizing that not managing these risks affects individuals and damages, NIST wanted the framework to address ethical decision-making in product design, optimization of beneficial data and minimization of harmful consequences

“This tool is the result of the collaboration of the NIST with a diversified set of stakeholders from around the world representing the private industry, the public sector, the academic world and civil society on an open and transparent development process of one year,” said Dylan Gilbert, a privacy engineering program in NIST, when the frame was launched.

Noting an increase in cyber attacks affecting health care organizations in 2022, the American Ministry of Health and Social Services published advice on the strengthening of cyber-posture, while NIST offered advice to improve compliance with HIPAA security rules, which has since been removed with CFS 2.0 finalized.

At the same time as

“This is a modest but important update,” said Julie Chua, director of the Applied Cybersecurity Division of NIST, in a press release. “The PFW can be used alone to manage the risk of confidentiality, but we have also maintained its compatibility with the CSF 2.0 so that organizations can use them together to manage the full spectrum of confidentiality and cybersecurity risks.”

Andrea Fox is editor -in -chief of Healthcare It News.
Email: afox@hims.org

Healthcare It News is a publication of the Himss media.

Related Articles

Leave a Reply

Your email address will not be published. Required fields are marked *

Back to top button